Routinator 0.15.1 ‘Ain’t No Country Club Either’ released

We are pleased to announce the latest release of Routinator, version 0.15.1 ‘Ain’t No Country Club Either.’

Routinator is an RPKI relying party software that collects and validates statements in the Resource Public Key Infrastructure (RPKI) about allowed route origins and makes them available to the BGP workflow.

This release fixes two issues that surfaced in 0.15.0.

The new optimistic initial validation run succeeded even if no trust anchor certificates were stored for a TAL because this is the expected behaviour for a regular validation run. This would result in the data for this trust anchor missing in the first data set produced. This is now fixed: if there are not stored trust anchor certificates for a TAL, the initial run is aborted and a normal run is started.

Additionally, when we added additional restrictions to the systemd unit files shipped with the binary packages, we added PrivateUsers=yes. This has the somewhat unexpected side effect that Routinator couldn’t bind to privileged ports, i.e., ports below 1024, for the RTR or HTTP servers. This release thus removes this setting from the unit files.